Monday, November 25, 2024
1 change · saas-17.4
Security fixes and vulnerability patches
The Time Off overview no longer shows a grouping option that could reveal other employees' leave types to users without the proper access rights. This helps protect sensitive employee absence information while keeping the overview available for authorized use.
Original PR description
In the overview, any user with no time off rights can go to the custom groupby filter "Leave" and see the time off type of other users. This commit hides this filter to prevent access. task-4241846 --- I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr